Re: how to check if shutdown/halt has been executed



Hi,

Yes that was my question,.

Now I´m totally sure that anybody rebooted the system. I´m looking for a
power problem,

Thanks a lot for your help,.

ESG

2010/11/13 hike <mh1272@xxxxxxxxx>

the UNIX last command lists reboots and shutdowns from the command line.
the RHEL last should do the same thing (IIRC, it does but we rarely use
last
on linux boxes).
if it doesn't list anything, that means the shutdown/reboot was not caused
by a command such as shutdown or reboot. this indicates a spontaneous
shutdown caused by any number of things--power outage, drastic software or
hardware problems, etc.
this is what you asked for, isn't it.



On Fri, Nov 12, 2010 at 8:24 AM, ESGLinux <esggrupos@xxxxxxxxx> wrote:

yes it´s avaliable but I don´t see anything about the shutdown :-(

Greetings,

ESG

2010/11/12 hike <mh1272@xxxxxxxxx>

isn't the last command still available in RHEL?


On Fri, Nov 12, 2010 at 5:27 AM, ESGLinux <esggrupos@xxxxxxxxx> wrote:

Hi,

I think something put the finger in the power, because I don´t get
any
log
in messages or other file.

Now I´m going to investigate who has made that without telling
nothing
:-(((

Thanks

ESG

2010/11/11 Dennis Comeaux <dennis.comeaux@xxxxxxxxx>

Have you tried /var/log/messages? I have notes in there about
Kernel
logging stopping when it goes down. If someone just gave the
machine
the
finger (hit the power button and held it down so it went down
without
an
ACPI poweroff call), then you won't have anything. I think it may
also
be
recorded in /var/log/daemon.log on some installs. However WHO
requested
it
may or may not be.

On Fri, Nov 5, 2010 at 5:05 AM, ESGLinux <esggrupos@xxxxxxxxx>
wrote:

Hi All,

I have arrived today at work and I have found a RHEL 5 server
poweroff.

I want to know what has happened. So, I first want to know if
someone
has
executed shutdown/halt/poweroff or any other command that can
power
off
the
machine,

I have checked the messages file but I cant see nothing:

Nov 4 12:24:34 www smartd[2097]: In the system's table of
devices
NO
devices found to scan
Nov 4 12:24:34 www smartd[2097]: Monitoring 0 ATA and 0 SCSI
devices
Nov 4 12:24:34 www smartd[2099]: smartd has fork()ed into
background
mode.
New PID=2099.
Nov 5 09:20:01 www syslogd 1.4.1: restart.
Nov 5 09:20:02 www kernel: klogd 1.4.1, log source = /proc/kmsg
started.

at 09:20 I restart the machine.

With the sar command I see this:

06:40:02 AM all 0.10 0.00 0.08 0.48
0.01
99.33
06:50:01 AM all 0.11 0.00 0.07 0.36
0.01
99.45
07:00:01 AM all 0.13 0.00 0.07 0.80
0.01
98.98
Average: all 0.12 0.00 0.07 0.80
0.01
98.99

09:19:48 AM LINUX RESTART

09:30:01 AM CPU %user %nice %system %iowait
%steal
%idle
09:40:01 AM all 0.60 0.00 0.11 5.57
0.01
93.71

So between 07:00 and 07:10 the system goes down, but WHY???

with the ausearch command I get this:

----
time->Fri Nov 5 07:01:01 2010
type=CRED_ACQ msg=audit(1288936861.670:3707): user pid=9601 uid=0
auid=4294967295 msg='PAM: setcred acct="root" :
exe="/usr/sbin/crond"
(hostname=?, addr=?, terminal=cron res=success)'
----
time->Fri Nov 5 07:01:01 2010
type=LOGIN msg=audit(1288936861.670:3708): login pid=9601 uid=0
old
auid=4294967295 new auid=0
----
time->Fri Nov 5 07:01:01 2010
type=USER_START msg=audit(1288936861.720:3709): user pid=9601
uid=0
auid=0
msg='PAM: session open acct="root" : exe="/usr/sbin/crond"
(hostname=?,
addr=?, terminal=cron res=success)'
----
time->Fri Nov 5 07:01:01 2010
type=CRED_DISP msg=audit(1288936861.730:3710): user pid=9601
uid=0
auid=0
msg='PAM: setcred acct="root" : exe="/usr/sbin/crond"
(hostname=?,
addr=?,
terminal=cron res=success)'
----
time->Fri Nov 5 07:01:01 2010
type=USER_END msg=audit(1288936861.730:3711): user pid=9601 uid=0
auid=0
msg='PAM: session close acct="root" : exe="/usr/sbin/crond"
(hostname=?,
addr=?, terminal=cron res=success)'
----
time->Fri Nov 5 09:20:00 2010
type=DAEMON_START msg=audit(1288945200.613:9651): auditd start,
ver=1.7.17
format=raw kernel=2.6.18.8-xen auid=4294967295 pid=1440
res=success
----

If the systems goes down because of power failure or something
strange,
is
there any way to check it?

Thanks in advance

ESG
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx
?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list




--
"il n'y a pas de liberté s'il y a dépendance"
--Theobalt
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx
?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx
?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list



Relevant Pages

  • Re: WDS + WPA + RADIUS problem
    ... dive into the router from a telnet or SSH session ... command line or menu driven reboot. ... range of power supply voltages. ... but haven't spoken to client this morning to ascertain). ...
    (alt.internet.wireless)
  • [SUMMARY] Sunfire v880 reboot
    ... are the responses to my post regarding: Sunfire v880 reboot ... I should have mentioned in my original post that this system has been ... take a look in the RSC buffer logs for whatever ... >if your ups has a glitch, you have a power event. ...
    (SunManagers)
  • Re: Samsung ML-2010
    ... it on after the computer has been turned on, it draws so much ... I took it off the power strip. ... plugs, the ... No problem with the computer - it didn't reboot. ...
    (comp.periphs.printers)
  • Re: Samsung ML-2010
    ... turn it on after the computer has been turned on, it draws so ... much current that it causes the computer to reboot. ... I took it off the power strip. ... contacts on the plugs, or maybe even inside the wall going up to ...
    (comp.periphs.printers)
  • Re: problem with a net printer
    ... Yes, I can solve the electrical power, but I can´t solve the software problem. ... Always I reboot XP laptop where is connected the printer, ... If I wan´t print from Millenium computer I must reboot this computer. ...
    (microsoft.public.windowsxp.network_web)